JWT Decoder: quick start guide
Everything you need for a first successful run: what to paste in, which option actually matters, and how to read the result.
How to use
- Open the tool and paste your input into the left pane.
- Set only the options your task actually needs — the defaults are correct for most inputs.
- Read the result in the right pane; it updates as you type.
- Use Copy to take the result, or Download to save it as a file.
Examples
Decoded without verification.
Input
eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWUsImlhdCI6MTUxNjIzOTAyMn0.KMUFsIDTnFmyG3nMiGM6H9FNFUROf3wh7SmqJp-QV30
Output — Results
<table class="tb-table"><tr><th colspan="2">Header</th></tr><tr><td>alg</td><td><code>"HS256"</code></td></tr><tr><td>typ</td><td><code>"JWT"</code></td></tr></table><table class="tb-table"><tr><th colspan="2">Payload</th></tr><tr><td title="Subject">sub <small>(Subject)</small></td><td><code>1234567890</code></td></tr><tr><td title="">name</td><td><code>John Doe</code></td></tr><tr><td title="">admin</td><td><code>true</code></td></tr><tr><td title="Issued at">iat <small>(Issued at)</small></td><td><code>1516239022 → 2018-01-18T01:30:22.000Z (EXPIRED/past)</code></td></tr></table><p class="tb-note">Algorithm: <b>HS256</b> · Signature present: yes (not verified — verification needs the secret/public key) · no exp claim</p>
Run
Description
Inspect JWT header, payload and signature metadata.
Related tools
Strong Password GeneratorCrypto-random passwords with full policy control.Passphrase GeneratorDiceware-style memorable passphrases.Password Strength TesterEstimate entropy and crack-time of a password.API Key GeneratorRandom hex / Base64 secrets of any length.Basic Auth Header GeneratorBuild and decode Authorization: Basic headers.Checksum VerifierCompare a file hash against the published digest.